Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/6bba07e6-addc-37fd-a9ca-a9e17c5532e9.roa
File:                     6bba07e6-addc-37fd-a9ca-a9e17c5532e9.roa (raw, json)
Hash identifier:          N2/aPrsiLz5qHrL6kOIaDqTFJ9ud28ssdbNPmNCGWUk=
Subject key identifier:   0E:F2:EC:25:60:8C:95:F6:E9:85:3C:8A:1C:0D:AA:75:52:CD:C1:99
Certificate issuer:       /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Certificate serial:       010D0C9F4328584E66DA0F7231C4E4A448AC2880
Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/6bba07e6-addc-37fd-a9ca-a9e17c5532e9.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     21782
IP address blocks:        66.199.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:0f:72:31:c4:e4:a4:48:ac:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=8a83919e-0a16-45ef-acf4-ef148d76e969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3e:f3:f6:8e:4c:98:d1:a9:b2:78:ec:2d:aa:
                    31:ce:1c:7a:0a:72:e0:a9:2f:ab:2d:6c:67:2a:f0:
                    49:bb:74:91:f3:01:a0:ae:3a:ca:7a:21:1f:78:34:
                    bb:57:dc:f0:1d:7f:82:25:bf:40:f5:21:b2:e3:ab:
                    58:c2:f4:dc:08:27:a3:3e:4b:45:70:cf:3a:54:bd:
                    98:91:91:55:24:e2:79:64:fe:4f:04:f0:22:36:ee:
                    01:ed:ef:ed:5e:db:54:2a:7a:23:5f:c1:77:e5:4f:
                    9f:fd:7f:e7:1e:f0:60:30:8d:68:5f:58:1f:12:87:
                    b3:3c:4c:66:e6:52:30:6b:a3:3e:29:ea:38:95:76:
                    87:8f:14:22:4f:6f:5b:72:b8:a1:22:50:d4:67:7c:
                    b5:41:3e:35:0b:03:eb:65:af:56:43:7f:51:0f:91:
                    48:a3:7e:b9:06:3b:d0:b0:4e:71:04:54:31:c6:4e:
                    63:e0:fc:37:41:a3:53:1d:03:dc:b9:2b:61:98:0d:
                    66:29:61:76:7f:78:0b:91:d1:51:0d:eb:53:ca:26:
                    26:a0:6f:60:5b:a0:ee:97:35:5c:7a:f8:0a:a9:c9:
                    d2:01:76:42:a7:ba:77:1a:6d:af:81:3f:57:e2:9f:
                    19:df:76:1f:b5:e9:b7:aa:d7:7a:d6:4b:95:c2:d2:
                    10:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F2:EC:25:60:8C:95:F6:E9:85:3C:8A:1C:0D:AA:75:52:CD:C1:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/6bba07e6-addc-37fd-a9ca-a9e17c5532e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl

            X509v3 Authority Key Identifier:
                keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.199.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:6f:52:ba:38:a4:92:fc:52:85:54:49:e0:92:83:dd:78:94:
         0e:1c:b0:7d:ef:28:03:e9:95:48:d1:fd:54:45:31:68:9c:7d:
         3b:cc:fb:8b:4a:ee:28:9e:f6:c9:f3:93:df:ec:3c:b6:83:89:
         7b:27:c2:3f:f1:7e:90:62:93:81:35:12:fa:d7:af:b3:89:27:
         30:c4:9a:60:4d:51:e4:0e:a2:1c:2e:7d:6e:22:52:7a:08:cc:
         af:37:ad:ab:ba:78:e8:6a:7b:fe:f0:f1:a1:7a:4e:10:e2:ac:
         48:bb:7e:da:ea:ae:c9:24:3a:53:cb:66:58:63:f9:45:8f:47:
         cf:07:b2:5b:62:cd:9d:8f:48:0b:48:14:9b:d6:49:8c:ab:73:
         d9:d4:ca:14:a6:d2:2e:24:fd:ea:b7:5f:58:0d:6b:04:89:2a:
         b3:fe:c9:59:18:f3:a0:87:b4:60:ae:d9:38:d1:17:c9:6a:f2:
         29:92:7b:86:c6:27:12:c9:05:c7:fe:59:13:52:4f:67:85:be:
         67:27:93:9e:14:aa:65:a4:51:ac:09:bb:a9:b7:3e:9f:76:cb:
         ca:da:e0:de:c7:eb:68:64:ce:d3:39:dc:a2:fe:79:28:77:86:
         e0:4d:73:d5:4f:47:26:9f:73:d5:b3:1c:db:bb:7d:6f:9e:39:
         05:76:0f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 20:56:05 2026 by rpki-client